摘要
现有自底向上的角色工程方法挖掘规模庞大,挖掘结果存在冗余,且不能反映系统功能的安全需求。为优化角色结果,针对角色优化中的互斥约束问题,结合枚举角色挖掘,提出一种基于互斥权限约束的角色挖掘优化方法。利用用户聚类元组及互斥约束优化角色挖掘过程,通过角色职责分离对安全约束的合理性进行分析,采用矩阵分析法调整已挖掘权限的矩阵单元值,挖掘优化角色以覆盖所有权限。实验结果表明,通过权限覆盖分析法辅助挖掘的优化角色结果能够保证挖掘过程的完整性;与枚举挖掘法相比,该方法能够保证信息系统的安全性,降低角色结果的冗余度。
Mining roles in large scale organizations are very redundant and can not reflect system security requirements in existing approaches to bottom-up role engineering. In order to discover optimal roles, this paper proposes an optimization method for role mining, which is based on the enumeration approach to role mining. The method utilizes mutually exclusive permissions constraints to optimize the role mining process by clustering users. It analyzes the correctness of secure constraints by using separation of duty,and cells’ values of mining permissions are adjusted in access control matrix. The method mines roles that cover all permissions. Experimental results show that the set of optimal roles can ensure the completeness of role mining. Compared with the enumeration method,the optimization method can reduce the redundancy of roles and ensure system security.
出处
《计算机工程》
CAS
CSCD
2014年第11期205-210,共6页
Computer Engineering
基金
国家自然科学基金资助项目(61202194)
河南省教育厅科学技术研究基金资助重点项目(13A520765)
河南省信息技术教育研究基金资助项目(ITE12192)
关键词
基于角色的访问控制
角色工程
角色挖掘
角色优化
互斥权限约束
访问控制矩阵
Role-based Access Control（RBAC）
role engineering
role mining
role optimization
mutually exclusive permissions constraints
access control matrix
